2414 matches found
Malicious code in froxlor (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 445e6f97a516e090b04dc5969fbc1472e2c740461dec0b7769bbe76e5d3b6326 The OpenSSF Package Analysis project identified 'froxlor' @ 19.0.4 npm as malicious. It is considered malicious because: - The package...
MAL-2024-136 Malicious code in librct (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1f5f02ff35835e34a22c3e1381a0888b755d52334e14e61160dff3b9ec4e08b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-135 Malicious code in siif_components (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2304aeb0d32868f4f2b4f1b3cc9c6fe5d8109d9a14029cbaab0d947287e9686f The OpenSSF Package Analysis project identified 'siifcomponents' @ 7.0.5 npm as malicious. It is considered malicious because: - The package...
MAL-2024-132 Malicious code in storefront_h5_sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f7c0d65d6fdf4ca9a7677bce242a39f89c488703b532de05acb574c7baa799e3 The OpenSSF Package Analysis project identified 'storefronth5sdk' @ 1.1.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-131 Malicious code in pd-ui-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b46ebcb2f76102916a1ab764b5af360b8c6cdd1dc56a269538132bcc4e307983 The OpenSSF Package Analysis project identified 'pd-ui-kit' @ 1.5.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-130 Malicious code in noblox.js-proxy-server (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2b3d7766d2ada5a6d17ae9ae430365649d4034341202ba6fc6a07a0ab6a553fb The OpenSSF Package Analysis project identified 'noblox.js-proxy-server' @ 4.15.1 npm as malicious. It is considered malicious because: - The...
MAL-2024-110 Malicious code in testing-dep-collab-obsfucated (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c5a66859a22b9608532f75d7748aee57740c8699a9204d441db0e1104e1c4c50 The OpenSSF Package Analysis project identified 'testing-dep-collab-obsfucated' @ 1.0.0 npm as malicious. It is considered malicious because: -...
Malicious code in testing-burp-library-please-ignore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2249726c84e729bde202820bcc2ac6cdfaec65115b09e7505b33a51158988aad The OpenSSF Package Analysis project identified 'testing-burp-library-please-ignore' @ 1.0.0 npm as malicious. It is considered malicious becaus...
MAL-2024-102 Malicious code in testing-burp-library-please-ignore (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2249726c84e729bde202820bcc2ac6cdfaec65115b09e7505b33a51158988aad The OpenSSF Package Analysis project identified 'testing-burp-library-please-ignore' @ 1.0.0 npm as malicious. It is considered malicious becaus...
MAL-2024-101 Malicious code in wdpr-validators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3603a1435c7217578ea596fa8e598c1a1a0bf6c955b1c4248b9c9978c9a1c6d4 The OpenSSF Package Analysis project identified 'wdpr-validators' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...
Malicious code in wdpr-validators (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3603a1435c7217578ea596fa8e598c1a1a0bf6c955b1c4248b9c9978c9a1c6d4 The OpenSSF Package Analysis project identified 'wdpr-validators' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...
MAL-2024-96 Malicious code in wdpr-node-http-error-handler (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4afec8bd883f6042f7047f6b0d29cd37d57ef2e6f179a717a0ee7bbf44a16fe8 The OpenSSF Package Analysis project identified 'wdpr-node-http-error-handler' @ 16.1.1 npm as malicious. It is considered malicious because: -...
Malicious code in wdpr-node-cdn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b2c2f25a3f7cd69d4500c298b6a66498423b248384970031de6dc2fd42221ecd The OpenSSF Package Analysis project identified 'wdpr-node-cdn' @ 16.0.2 npm as malicious. It is considered malicious because: - The package...
MAL-2024-95 Malicious code in wdpr-node-conversation (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 13bac8c43485c160298a14b6d17e48f8a18cf34bf9b2f1c73b77cc45a82b577b The OpenSSF Package Analysis project identified 'wdpr-node-conversation' @ 2.3.3 npm as malicious. It is considered malicious because: - The...
MAL-2024-100 Malicious code in wdpr-ra-node-csp (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f84a83ea13684761bce489c49b762047ea5f7cb2d68aa8e38f64842cbf224840 The OpenSSF Package Analysis project identified 'wdpr-ra-node-csp' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in synology-cft (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ce8d0a13d9faee23cc5fc3a8ad9842e1ac0678ba3fd10d0bd453006cb82a88a7 The OpenSSF Package Analysis project identified 'synology-cft' @ 10.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-89 Malicious code in heatwallet (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 04a592accda6e728f314fbe238a01ef38f20a2f7a1e0a09aa4099bd79a8650d7 The OpenSSF Package Analysis project identified 'heatwallet' @ 10.1.1 npm as malicious. It is considered malicious because: - The package...
MAL-2024-88 Malicious code in pecko (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0b4f977d84345ded72bac3adc44f78bfc69c9393bf8223ddff83c73b01673ca2 The OpenSSF Package Analysis project identified 'pecko' @ 1.0.1 npm as malicious. It is considered malicious because: - The package communicates...
MAL-2024-86 Malicious code in shoponline.epiroc.com (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0af86d9c1fc83f25835c1b437a93a6a278c5bcb1cfd811a0892fc93af187d0a4 The OpenSSF Package Analysis project identified 'shoponline.epiroc.com' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
Malicious code in test-devoxx (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 94d087127b055251bef2c40e4c884c82c7f4e39f4631fa5995116fb9b1d65f4f The OpenSSF Package Analysis project identified 'test-devoxx' @ 0.0.2 npm as malicious. It is considered malicious because: - The package...